Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Unrestricted uploading of dangerous file types to AvePoint products
Vulnerability Description
Unrestricted file upload vulnerability in DocAve 6.13.2, Perimeter 1.12.3, Compliance Guardian 4.7.1, and earlier versions, allowing administrator users to upload files without proper validation. An attacker could exploit this vulnerability by uploading malicious files that compromise the system. In addition, it is vulnerable to Path Traversal, which allows files to be written to arbitrary directories within the web root.
CVSS Information
N/A
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
Avepoint多款产品 代码问题漏洞
Vulnerability Description
AvePoint DocAve等都是美国AvePoint公司的产品。AvePoint DocAve是一个文档管理平台。AvePoint Perimeter是一个文档分享平台。AvePoint Compliance Guardian是一个数据治理平台。 Avepoint多款产品存在代码问题漏洞，该漏洞源于未正确验证文件上传，可能导致上传恶意文件并危害系统。此外，还存在路径遍历漏洞，可能导致文件被写入Web根目录中的任意目录。以下产品和版本受到影响：DocAve 6.13.2版本、Perimeter 1.12
CVSS Information
N/A
Vulnerability Type
N/A